We are looking to add a Senior Security Specialist to support the United States Patent Trademark Office (USPTO). All candidates should have experience in the following areas:
- Knowledge of NIST 800-53 Revision 4 Security Controls
- Knowledge of activities required for NIST 800-37 R1 Risk Management Framework
- Knowledge of Assessment and Authorization (A&A) or Certification and Accreditation (C&A) including understanding of processes and components of a Security Authorization Package
- Knowledge of System Categorization utilizing NIST FIPS 199 processes
- Excellent analytical reasoning skills
- Excellent oral and written communication skills
- Excellent technical writing skills
Required Knowledge/SkillsKnowledge of FISMA, NIST 800-53 R4 Security Controls, NIST 800-37 R1 Processes, FIPS 199 Categorization, and various NIST 800 series publications. A firm grasp and understanding of the Risk Management Framework
Knowledge of various technical concepts and technologies including applications, platforms, operating systems, databases, and more
Familiarity with FedRAMP security assessment framework preferred
Education/Years of Experience/CertificationsRequired:
Preferred ( in addition to CISSP):
Required:
- At least 6 years of IT Security Experience
- Ability to work independently and as part of a team
- Motivation and desire to increase knowledge of and responsibility for system security
- Ability to multitask in a dynamic environment, prioritize, and meet deadlines under pressure
Preferred:
- 6-10 years of IT Security Experience
- Experience with implementation and documentation of NIST 800-53 R4 Security Controls to secure systems
- Experience updating System Security Authorization Packages
- Experience performing activities required for NIST 800-37 R1 Risk Management Framework